Posture Policy Set Policy Constraint Org Policy Constraint Custom Custom Constraint Args
Properties
The action to take if the condition is met. Possible values are: ALLOW
, DENY
.
A CEL condition that refers to a supported service resource, for example resource.management.autoUpgrade == false
. For details about CEL usage, see Common Expression Language.
A human-friendly description of the constraint to display as an error message when the policy is violated.
A human-friendly name for the constraint.
A list of RESTful methods for which to enforce the constraint. Can be CREATE
, UPDATE
, or both. Not all Google Cloud services support both methods. To see supported methods for each service, find the service in Supported services.
Immutable. The fully qualified name of the Google Cloud REST resource containing the object and field you want to restrict. For example, container.googleapis.com/NodePool
.